Add the following in the services.xml of your AAR service archive: <module ref="rampart"/> <parameter name="sin.jaas.transport.login.context">Default</parameter> <wsp:Policy wsu:Id="BasicAuthPolicy" xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy" xmlns...